A major DeFi exploit on Cronos has left approximately $9.19 million unrecovered.
According to a Cronos post-mortem, an attacker manipulated collateral on the Tectonic lending protocol and borrowed approximately $120.4 million during the August 30 exploit.
How the Exploit Happened
The attacker allegedly manipulated collateral values inside Tectonic.
This allowed the attacker to borrow much more than the underlying collateral should have supported.
The total borrowed amount reached approximately $120.4 million.
The Blockchain Was Halted
Cronos validators stopped the network at block 90,907,150 following the incident.
This allowed the team to investigate the attack and prepare a response.
The Rollback
Cronos subsequently rolled back approximately $111.2 million.
That left approximately $9.19 million that had already moved off-chain and remained unrecovered.
Why Rollbacks Are Controversial
A blockchain rollback can reverse transactions that have already been considered final by the network.
Supporters argue that emergency intervention can help recover stolen assets.
Critics argue that rollbacks can undermine assumptions about blockchain immutability.
What This Means for DeFi
The event demonstrates the risks associated with decentralized lending systems.
A protocol can fail because of:
- smart-contract vulnerabilities
- oracle manipulation
- collateral manipulation
- governance issues
- economic attacks
Final Takeaway
Cronos says approximately $9.19 million remains unrecovered after the Tectonic exploit, despite a rollback that reversed roughly $111.2 million.
The incident highlights the difficult balance between blockchain immutability and emergency intervention after major DeFi attacks.